iTP Secure WebServer System Administrator's Guide (Version 7.0)

Administering Session Identifiers for Anonymous
Sessions
iTP Secure WebServer System Administrator’s Guide—523346-012
11-6
Advanced Configuration Options
# Declare a department as allowing anonymous ticketing
# to group 0. Because it is anonymous, we can pick any
# legal name we want (that is, anything that does not
# have a space in it).
SI_Department Engineering -EnableAnonymousTicketing {0}
#
# protect all *.htm* and *.cgi* files with anonymous
# tickets
#
Region {*.htm*} {
SI_RequireSI Engineering 0
}
Region {*.cgi*} {
SI_RequireSI Engineering 0
}
Advanced Configuration Options
This subsection describes how to customize the use of tickets to meet a variety of
needs, including:
•
Anonymous Ticketing Attributes on page 11-6
•
Setting the Anonymous Ticket Expiration Time on page 11-8
•
Browser Caching on page 11-9
•
How Proxy Servers Affect Ticketing on page 11-9
Anonymous Ticketing Attributes
You can use various ticketing attributes to control ticketing behavior, as outlined in
Table 11-1.
:
Table 11-1. Anonymous Ticketing Attributes (page 1 of 2)
Attribute Description Default
AnonymousTicketExpiration Specifies the length of time that
anonymous tickets are valid.
6 hours
CookiePersistence Specifies the number of seconds,
from the time that a cookie is
issued, that the cookie remains
valid.
0 seconds
EnableAnonymousTicketing Enables anonymous ticketing for
resources protected with specified
group IDs.
Anonymous
ticketing is
off for all
groups